Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-24295 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device… 7.0 Élevée 10 mars 2026
CVE-2026-24296 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device… 7.0 Élevée 10 mars 2026
CVE-2026-24294 Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 mars 2026
CVE-2026-24293 Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 Élevée 10 mars 2026
CVE-2026-24291 Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an… 7.8 Élevée 10 mars 2026
CVE-2026-24292 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges… 7.8 Élevée 10 mars 2026
CVE-2026-24289 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 mars 2026
CVE-2026-24290 Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 mars 2026
CVE-2026-24287 External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 mars 2026
CVE-2026-24285 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally 7.0 Élevée 10 mars 2026
CVE-2026-24283 Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally 8.8 Élevée 10 mars 2026
CVE-2026-23673 Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 mars 2026
CVE-2026-23671 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM… 7.0 Élevée 10 mars 2026
CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 Élevée 10 mars 2026
CVE-2026-23669 Use after free in RPC Runtime allows an authorized attacker to execute code over a network 8.8 Élevée 10 mars 2026
CVE-2026-23668 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics… 7.0 Élevée 10 mars 2026
CVE-2026-20846 Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network 7.5 Élevée 10 févr. 2026
CVE-2026-21222 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Moyenne 10 févr. 2026
CVE-2026-21231 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows… 7.8 Élevée 10 févr. 2026
CVE-2026-21237 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for… 7.0 Élevée 10 févr. 2026
CVE-2026-21232 Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 févr. 2026
CVE-2026-21238 Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 Élevée 10 févr. 2026
CVE-2026-21239 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 Élevée 10 févr. 2026
CVE-2026-21241 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 Élevée 10 févr. 2026
CVE-2026-21240 Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate… 7.8 Élevée 10 févr. 2026

Autres produits Microsoft